summaryrefslogtreecommitdiffstats
path: root/utils/gssd/gssd.man
diff options
context:
space:
mode:
Diffstat (limited to 'utils/gssd/gssd.man')
-rw-r--r--utils/gssd/gssd.man12
1 files changed, 10 insertions, 2 deletions
diff --git a/utils/gssd/gssd.man b/utils/gssd/gssd.man
index 1a30d69..f2ecd69 100644
--- a/utils/gssd/gssd.man
+++ b/utils/gssd/gssd.man
@@ -41,10 +41,18 @@ authentication.
.B -k keytab
Tells
.B rpc.gssd
-to use the keys for principals nfs/hostname in
+to use the keys found in
.I keytab
-to obtain machine credentials.
+to obtain "machine credentials".
The default value is "/etc/krb5.keytab".
+Previous versions of
+.B rpc.gssd
+used only "nfs/*" keys found within the keytab.
+Now, the first keytab entry for each distinct Kerberos realm
+within the keytab is used. This means that an NFS client
+no longer needs an "nfs/hostname" principal and keytab entry,
+but can instead use a "host/hostname" (or any other) keytab
+entry that is available.
.TP
.B -p path
Tells